We accept FSA, HSA & OTC Flex Cards
Last updated: March 2026
TADA Medical Supply (“we,” “us,” or “our”) operates the website at tadamedicalsupply.org. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website and services.
By using our website, you consent to the data practices described in this policy. If you do not agree with these practices, please do not use our website.
TADA Medical Supply does NOT collect, store, or transmit Protected Health Information (PHI). We are not a covered entity or business associate under HIPAA. We operate as a standard e-commerce retailer of medical supplies and durable medical equipment.
We never collect prescriptions, insurance member IDs, diagnoses, medical records, or any other health information. HCPCS codes displayed on products are publicly available billing codes provided for customer convenience in self-filing insurance claims.
We collect only standard e-commerce information necessary to process your orders and provide customer service:
| Data Type | Examples | Purpose |
|---|---|---|
| Account info | Name, email, hashed password | Account creation & authentication |
| Shipping info | Shipping & billing addresses | Order fulfillment & delivery |
| Payment info | Processed by Stripe (we never store full card numbers) | Payment processing |
| Order history | Products, quantities, prices, HCPCS codes | Order tracking & receipts |
| Usage data | Pages visited, search queries, products viewed | Website improvement & recommendations |
We do NOT collect: medical records, prescriptions, diagnoses, insurance member IDs, treatment plans, or any other Protected Health Information.
We do not sell your personal information. We share data only with the following service providers, each of which has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication | Account info, orders, preferences |
| Stripe | Payment processing (PCI DSS compliant) | Payment card info, billing address |
| Resend | Transactional emails | Email address, order details |
| Vercel | Website hosting & CDN | IP address, usage data (server logs) |
| Shipping carriers | Order delivery | Shipping address, contact name |
We may also share information when required by law, subpoena, or legal process.
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion is requested |
| Order history | 7 years (tax & legal compliance) |
| Payment data | Managed by Stripe per their retention policy |
| Usage analytics | 26 months |
| Support communications | 2 years after resolution |
We implement industry-standard security measures to protect your data:
We use essential cookies required for the website to function:
You can control cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
You have the right to:
To exercise any of these rights, please contact us at tada.medsupply@gmail.com. We will respond within 30 days.
California residents (CCPA): You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To submit a request, email us at tada.medsupply@gmail.com.
European residents (GDPR): If you are located in the European Economic Area, you have additional rights including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data is the performance of our contract with you (order fulfillment) and our legitimate interests (website improvement and fraud prevention).
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us personal information, please contact us.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated via email or a prominent notice on our website. Your continued use of the site after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: